What Does NeXpose Scan?
Database Vulnerability Assessment
Breaking into corporate networks is no longer an effort in proving technical superiority for the hacker over corporate IT professionals. Hackers now are looking for financial gain, and accessing information that has monetary value on the black market such as credit card data, personal information, financial information, bank accounts, and social security numbers become their prey. Databases are often overlooked when it comes to security, providing a rich target for those looking to make a living off your information. Databases, like other IT assets, need to be regularly scanned for vulnerabilities that open your data to potential compromise.
NeXpose provides comprehensive database scanning for vulnerabilities that effect databases such as default accounts, default permissions on database objects such as tables, views, and stored procedures, buffer overflows and denial of service. Regularly auditing your database servers helps your security staff identify configuration issues and policy and compliance violations. NeXpose current supports the following:
- Oracle
- Microsoft SQL Server
- Sybase
- PostgreSQL
- MySQL
- IBM DB2
- IBM DB/400
- Lotus Notes/Domino
NeXpose provides one-stop shopping for enterprise vulnerability assessment and includes database vulnerability assessment as part of your overall security strategy. NeXpose database vulnerability offers the following benefits:
- Audits a wide range of databases for security, configuration and operational vulnerabilities, ensuring you secure your most valuable assets;
- Provides detailed reporting and remediation guidelines, providing your security staff with the information they need to resolve issues quickly and easily;
- Comes with pre-defined policy report templates, making compliance reporting for internal and external auditors effective;
Most database scanners look only at one aspect of your overall networked environment. NeXpose scans the entire IT infrastructure to advise you if a vulnerability in one system can be used to penetrate another. Only then can you be confident that your systems are protected from unwanted intruders.
